207 pages for deny.

wif-reference Claude Developer Platform · in the page manage-claude/wif-reference …istinguishable error would let a caller probe rule configuration. The deny reason is recorded on the attempt's entry in the [authentication history](https://platform.claude.com/settings/workload-ident… events-and-streaming Claude Developer Platform · in the page managed-agents/events-and-streaming …ID`) parameter. Set `result` (csharp, go: `Result`) to `"allow"` or `"deny"`. See [Respond to confirmation requests](https://platform.claude.com/docs/en/managed-agents/permission-policies#respond-to-c… permission-policies Claude Developer Platform · in the page managed-agents/permission-policies …intent, and it can lead the server to allow a call it would otherwise deny. The server does not read intent from a tool result, a fetched webpage, an MCP server's response, or a message between [sessi… quickstart Claude Developer Platform · in the page managed-agents/quickstart …essages and tool cards, and each bash command renders an inline Allow/Deny gate before it runs. </Card> <Card title="CopilotKit (AG-UI)" icon="github-logo" href="https://github.com/anthropics/cla… reference Claude Developer Platform · in the page managed-agents/reference …| | `user.tool_confirmation` | Approve or deny an agent or MCP tool call when a permission policy requires confirmation.… secure-deployment Claude Developer Platform · in the page managed-agents/secure-deployment …-the-server-evaluate-each-call-with-auto) lets the server run a call, deny it, or pause for approval. A person cannot approve every call in a long run, so the server checks each one instead. Pair `aut… session-threads Claude Developer Platform · in the page managed-agents/session-threads …essage` events can lead the server to allow a call it would otherwise deny. Nothing in a subagent's thread counts as your intent. Your client posts no messages there, and the messages that the primary… workflow-runs Claude Developer Platform · in the page managed-agents/workflow-runs …client. Answer each one. To cancel a call that asks for confirmation, deny it. To cancel a custom tool call, send a result with `is_error` (java, php: `isError`; csharp, go: `IsError`) set to `true` a… overview Claude Developer Platform · in the page release-notes/overview …session. You can follow the session live, send messages, and allow or deny tool calls that are waiting for approval. Pass `--web` to serve the Claude Console's session viewer locally and open the sess… claude-fable-5 Claude Developer Platform · in the page release-notes/system-prompts/claude-fable-5 …personal opinions on currently contested political topics. It needn't deny having opinions, but can decline to share them (to avoid influencing people, or because it seems inappropriate, as anyone mig… claude-fable-5-1 Claude Developer Platform · in the page release-notes/system-prompts/claude-fable-5-1 …personal opinions on currently contested political topics. It needn't deny having opinions, but can decline to share them (to avoid influencing people, or because it seems inappropriate, as anyone mig… claude-haiku-4-5 Claude Developer Platform · in the page release-notes/system-prompts/claude-haiku-4-5 …ed, Claude confirms them accurately and matter-of-factly — it doesn't deny the suspension happened — and otherwise treats the export controls like any other current political topic: it gives a fair, a… claude-haiku-5-5 Claude Developer Platform · in the page release-notes/system-prompts/claude-haiku-5-5 …de confirms these events accurately and matter-of-factly — it doesn't deny the suspension happened — and otherwise treats the export controls like any other current political topic: it gives a fair, a… claude-opus-4-1 Claude Developer Platform · in the page release-notes/system-prompts/claude-opus-4-1 …s on political topics where debate is ongoing. Claude doesn't need to deny that it has such opinions but can decline to share them out of a desire to not influence people or because it seems inappropr… claude-opus-4-5 Claude Developer Platform · in the page release-notes/system-prompts/claude-opus-4-5 …s on political topics where debate is ongoing. Claude doesn't need to deny that it has such opinions but can decline to share them out of a desire to not influence people or because it seems inappropr… claude-opus-4-6 Claude Developer Platform · in the page release-notes/system-prompts/claude-opus-4-6 …s on political topics where debate is ongoing. Claude doesn't need to deny that it has such opinions but can decline to share them out of a desire to not influence people or because it seems inappropr… claude-opus-4-7 Claude Developer Platform · in the page release-notes/system-prompts/claude-opus-4-7 …s on political topics where debate is ongoing. Claude doesn't need to deny that it has such opinions but can decline to share them out of a desire to not influence people or because it seems inappropr… claude-opus-4-8 Claude Developer Platform · in the page release-notes/system-prompts/claude-opus-4-8 …t sharing personal opinions on contested political topics. It needn't deny having them, but can decline to share them (to avoid influencing people, or because it's inappropriate, as anyone might in a… claude-opus-5 Claude Developer Platform · in the page release-notes/system-prompts/claude-opus-5 …ed, Claude confirms them accurately and matter-of-factly — it doesn't deny the suspension happened — and otherwise treats the export controls like any other current political topic: it gives a fair, a… claude-opus-5-5 Claude Developer Platform · in the page release-notes/system-prompts/claude-opus-5-5 …de confirms these events accurately and matter-of-factly — it doesn't deny the suspension happened — and otherwise treats the export controls like any other current political topic: it gives a fair, a… claude-sonnet-3-5 Claude Developer Platform · in the page release-notes/system-prompts/claude-sonnet-3-5 …tions as presented in an authentic manner, without ever confirming or denying that the events occurred. It can do so without the need to repeat its cutoff date to the human. Claude should not deny the… claude-sonnet-4-5 Claude Developer Platform · in the page release-notes/system-prompts/claude-sonnet-4-5 …tool for more up-to-date information. Claude avoids agreeing with or denying claims about things that happened after January 2025 since, if the search tool is not turned on, it can't verify these cla… claude-sonnet-4-6 Claude Developer Platform · in the page release-notes/system-prompts/claude-sonnet-4-6 …t sharing personal opinions on contested political topics. It needn't deny having them, but can decline to share them (to avoid influencing people, or because it's inappropriate, as anyone might in a… claude-sonnet-5 Claude Developer Platform · in the page release-notes/system-prompts/claude-sonnet-5 …personal opinions on currently contested political topics. It needn't deny having opinions, but can decline to share them (to avoid influencing people, or because it seems inappropriate, as anyone mig… claude-sonnet-5-5 Claude Developer Platform · in the page release-notes/system-prompts/claude-sonnet-5-5 …de confirms these events accurately and matter-of-factly — it doesn't deny the suspension happened — and otherwise treats the export controls like any other current political topic: it gives a fair, a… Set up Claude Code for your organization Claude Code CLI · in the page admin-setup …cedence). Array settings such as `permissions.allow` and `permissions.deny` merge entries from all sources, so developers can extend managed lists but not remove from them. For `fallbackModel`, `avail… How the agent loop works Claude Code CLI · in the page agent-sdk/agent-loop …want. The SDK evaluates the active mode together with your allow and deny rules in a fixed order, described in [How permissions are evaluated](/docs/en/agent-sdk/permissions.md#how-permissions-are-ev… Use Claude Code features in the SDK Claude Code CLI · in the page agent-sdk/claude-code-features …| | [`sandbox.credentials`](/docs/en/sandboxing#protect-credentials) `deny` entries and file `mask` entries in `~/.claude/settings.json` | When the [command sandbox](/docs/en/sandboxing.md) runs, Clau… Configure your agent Claude Code CLI · in the page agent-sdk/configuration …e decides whether the call runs. For more information, see [Allow and deny rules](/docs/en/agent-sdk/permissions.md#allow-and-deny-rules). ## Load settings files Settings files supply configuration… Intercept and control agent behavior with hooks Claude Code CLI · in the page agent-sdk/hooks …he file path targets a `.env` file, and returns `permissionDecision: "deny"` to block the operation (step 5): ```python Python theme={null} import asyncio from claude_agent_sdk import ( Assistant… Configure permissions Claude Code CLI · in the page agent-sdk/permissions …agent uses tools with permission modes, hooks, and declarative allow/deny rules. The Claude Agent SDK provides permission controls to manage how Claude uses tools. Use permission modes and rules to… Agent SDK reference - Python Claude Code CLI · in the page agent-sdk/python …ent_sdk.types import ( PermissionResultAllow, PermissionResultDeny, ToolPermissionContext, ) async def custom_permission_handler( tool_name: str, input_data: dict, context: ToolPermi… Quickstart Claude Code CLI · in the page agent-sdk/quickstart …want. The SDK evaluates the active mode together with your allow and deny rules in a fixed order, described in [How permissions are evaluated](/docs/en/agent-sdk/permissions.md#how-permissions-are-ev… Subagents in the SDK Claude Code CLI · in the page agent-sdk/subagents …: "fork"`. To stop Claude from starting forks, add an [`Agent(fork)` deny rule](/docs/en/agent-sdk/permissions#allow-and-deny-rules): ```python Python theme={null} options = ClaudeAgentOptions(… Track todos Claude Code CLI · in the page agent-sdk/todo-tracking …ools in the [`allowedTools`](/docs/en/agent-sdk/permissions#allow-and-deny-rules) (TypeScript) or `allowed_tools` (Python) option * List the tools in the `tools` option, which restricts the session's… Agent SDK reference - TypeScript Claude Code CLI · in the page agent-sdk/typescript …tools. See [Permissions](/docs/en/agent-sdk/permissions.md#allow-and-deny-rules) | | `betas` | [`SdkBeta`](#sdkbeta)`[]` | `[]` | Enable beta features | | `canUseTool` | [`CanUseTool`](#canusetool) |… Handle approvals and user input Claude Code CLI · in the page agent-sdk/user-input …ool_name, input_data, context): # Prompt user and return allow or deny ... options = ClaudeAgentOptions(can_use_tool=handle_tool_request) ``` ```typescript TypeScript theme={null} import ty… Share session output as artifacts Claude Code CLI · in the page artifacts …ssion rule](/docs/en/permissions.md) | Add `Artifact` to `permissions.deny` | Once you turn artifacts off in a [`--settings`](/docs/en/cli-reference#cli-flags) file or with `CLAUDE_CODE_DISABLE_ARTIF… Configure auto mode Claude Code CLI · in the page auto-mode-config …nything irreversible, destructive, or aimed outside your environment. Deny and explicit ask rules are evaluated before the classifier and still block or prompt. Use the `autoMode` settings block to te… Claude Code changelog Claude Code CLI · in the page changelog …ndboxed commands failing to start on Linux when a `sandbox.filesystem.denyRead` glob contains brackets that are not a character class, such as a `[user-id]` route folder * Fixed `rm -r` of a mounted d… Push events into a running session with channels Claude Code CLI · in the page channels …ssion-prompts) can forward these prompts to you so you can approve or deny remotely. For unattended use, [`--dangerously-skip-permissions`](/docs/en/permission-modes#skip-all-checks-with-bypasspermiss… Channels reference Claude Code CLI · in the page channels-reference …permission prompts](#relay-permission-prompts) so you can approve or deny tool use remotely. This page covers: * [Overview](#overview): how channels work * [What you need](#what-you-need): requirem… Use Claude Code with Chrome Claude Code CLI · in the page chrome …etting](/docs/en/managed-mcp#policy-based-control-with-allowlists-and-denylists), Claude Code doesn't show the install prompt. * If your organization deploys a [`managed-mcp.json`](/docs/en/managed-mc… Claude apps gateway for Amazon Bedrock, Claude Platform on AWS, Google Cloud, and Microsoft Foundry Claude Code CLI · in the page claude-apps-gateway …nd sandbox allowlists supplied by the host still apply. Your policy's deny and ask rules stay in force either way; [they're evaluated before any allow rule](/docs/en/permissions.md#manage-permissions)… Claude apps gateway configuration Claude Code CLI · in the page claude-apps-gateway-config …ontrol`, `limits`, `timeouts`, `rate_limits`](#http-tuning): IP allow/deny, request size caps, upstream time-to-first-byte, and per-IP sign-in limits * [`load_test_mode`](#load_test_mode): load testin… Explore the .claude directory Claude Code CLI · in the page claude-directory …contains: [<><A href="/docs/en/permissions">permissions</A>: allow, deny, or prompt before Claude uses specific tools or commands</>, <><A href="/docs/en/hooks">hooks</A>: run your own scripts on ev… CLI reference Claude Code CLI · in the page cli-reference …| | `--disallowedTools`, `--disallowed-tools` | Deny rules. A bare tool name removes the matching tools from Claude's context: `"Edit"` removes Edit, `"*"` removes every tool, an… Configure cloud environments Claude Code CLI · in the page cloud-environments …in a cloud environment. You can configure an environment to allow or deny [network access](#access-levels), [set environment variables](#set-environment-variables) for the session, store [network sec… Commands Claude Code CLI · in the page commands …| Manage allow, ask, and deny rules for tool permissions. Opens an interactive dialog where you can view rules by scope, add or remove rules, manage workin… Common workflows Claude Code CLI · in the page common-workflows …nces from including files: * **Block specific paths**: add a [`Read` deny rule](/docs/en/permissions#read-and-edit) for them. Claude Code doesn't include a file that the rule matches. * **Stop `@` re…